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CLAIMS 



What is claimed is: 



A method of managing failures for use in a process control system 



having a unit module and a plurality of control modules communicatively coupled to 
the unit mqdule that carry out a process, the method comprising the steps of: 

collecting failure information within each of the control modules; 

generating a composite failure code within each of the control modules based 
on the failure information within each control module; 

automatically sending a group of composite failure codes to the unit module; 
and \ 

determining whether the process should be stopped based on the group of 
composite failure codes. 

2. The method of claim 1, wherein the step of collecting failure 
information within each of the control modules includes the step of generating a list 
of failures within each of the control modules. 

3. The methomof claim 2, wherein the step- of generating the list of 
failures includes the step oAstoring failure information associated with one or more 
of a control loop, sensor andVactuator that carry out actions for the control modules. 

4. The method of c\aim 1, wherein the step of generating the composite 
failure code within each of the control modules based on the failure information 
within each control module includes the step of mathematically combining the 
failure information within each control module. 



5. The method of claim 4\ wherein the step of mathematically 
combining the failure information includes the step of calculating a weighted sum 
using the failure information. \ 
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6. \ The method of claim 1, wherein the step of automatically sending 
the group ot composite failure codes to the unit module includes the step of 
selecting theVroup of composite failure codes based on a phase of the unit module. 

7. The method of claim 6, wherein the step of selecting the group of 
composite failure codes based on the phase of the unit module includes the step of 
selecting the group of composite failure codes based on a current phase of the unit 
module. \ 

8. The nlethod of claim 6, wherein the step of the step of selecting the 
group of composite failure codes based on the current phase of the unit module 
includes the step of serecting a composite failure code associated with a non- 
subservient control module. 

9. The methoVi of claim 8, wherein the step of selecting the composite 
failure code associated with the non-subservient control module includes the step of 
selecting a failure code base on an explicit request to include the non-subservient 
module in the current phase\of the unit module. 

10. The method of claim 1, wherein the step of determining whether the 
process should be stopped basea on the group of composite failure codes includes 
the steps of selecting one composite failure code from the group of composite failure 
codes and comparing the one selected composite failure code to a first 
predetermined threshold value associated with a determination of whether the 
process should be stopped. \ 

11. The method of claim IOl further comprising the step of comparing 
the one selected composite failure codeVo a second predetermined threshold value 
associated with a determination that the nrocess should continue. 
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12\ The method of claim 10, wherein the step of selecting the one 
composite failure code from the group of composite failure codes includes the step 
of selecting a worst composite failure code. 



13. Ihe method of claim 12, wherein the step of selecting the worst 
composite failure code includes the step of selecting a composite failure code having 
the highest numerical value. 

14. A method of managing failures for use in a process control system 
having a unit module\and a control module communicatively coupled to the unit 
module that carry out^ process, the method comprising the steps of: 

collecting failure information within the control module; 

generating a coniposite failure code within the control module based on the 
failure information withii^the control module; 

automatically sending the composite failure code to the unit module; and 

determining whether the process should be stopped based on the composite 
failure code. 

15. The method oAclaim 14, wherein the step of generating the 
composite failure code within me control module based on the failure information 
within the control module includes the step of mathematically combining the failure 
information within the control module. 



16. The method of claim\15, wherein the step of mathematically 
combining the failure information inqludes the step of calculating a weighted sum 
using the failure information. 
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iV The method of claim 14, wherein the step of determining whether the 
process should be stopped based on the composite failure code includes the step of 
comparing the composite failure code to a predetermined threshold value. 

18. A system that manages failures for use with a process control system 
having a processor and a unit module and a plurality of control modules 
communicatively opupled to the unit module, the system comprising: 

a computer readable medium; 

a first routineXstored on the computer readable medium and adapted to be 
executed by the proce$.sor that collects failure information within each of the control 
modules; \ 

a second routine stored on the computer readable medium and adapted to be 
executed by the process tnat generates a composite failure code within each of the 
control modules based on the failure information within each control module; 

a third routine stored on the computer readable medium and adapted to be 
executed by the processor tnat automatically sends a group of composite failure 
codes to the unit module; and 

a fourth routine stored\on the computer readable medium and adapted to be 
executed by the processor that Vietermines whether the process should be stopped 
based on the group of composite failure codes. 

19. The system of claim 18, wherein the first routine is further adapted to 
generate a list of failures within each of the control modules. 

20. The system of claim 19\ wherein the first routine is further adapted to 
store failure information associated witHyone or more of a control loop, sensor and 
actuator that carry out actions for the con\rol modules. 
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The system of claim 18, wherein the second routine is further adapted 
to matheni^tically combine the failure information within each of the control 
modules. 

22. \he system of claim 21, wherein the second routine is further adapted 
to calculate a wedghted sum using the failure information. 

23. TheXsystem of claim 18, wherein the third routine is further adapted 
to select the group of composite failure codes based on a phase of the unit module. 

24. The system of claim 23, wherein the third routine is further adapted 
to select the group of coipposite failure codes based on a current phase of the unit 
module. 

25. The system o^\^laim 18, wherein the fourth routine is fiirther adapted 
to select one composite failure^code from the group of composite failure codes and 
compare the one composite failure code to a first predetermined threshold value 
associated with a determination of whether the process should be stopped. 

26. The system of claimVs, wherein the fourth routine is further adapted 
to compare the one composite failureVcode to a second predetermined threshold 
value associated with a determination that the process should continue. 

27. The system of claim 25, wherein the fourth routine is further adapted 
to select a worst composite failure code frcmi the group of composite failure codes. 

28. The system of claim 27, whereiii the fourth routine is further adapted 
to select a composite failure code having the hi^est numerical value to be the worst 
composite failure code. 
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29. \ A device that manages failures for use in a process control system 
having a uni^module and a plurality of control modules communicatively coupled to 
the unit modul\ that carry out a process, the device comprising: 

a controller having a memory and a processor communicatively coupled to 
the memory, wherein the controller is programmed to use composite failure codes to 
determine whether \he process should be stopped. 



30. The device of claim 29, wherein the controller is further programmed 
to determine whether the process should be stopped based on composite failure 
codes that are associatedWith ones of the control modules that are currently needed 
by the unit module to carrv out the process. 

31. The device oft claim 30, wherein the controller is further programmed 
to select one of the compos it A failure codes and to compare the one selected 
composite failure code to a predetermined threshold value to determine whether the 
process should be stopped. 

32. The device of clain\31, wherein the controller is further programmed 
to select a worst composite failure ^ode to be the one selected composite failure 
code. 

33. A process control syster)^ for carrying out a process, the process 
control system comprising: 

a plurality of field devices; 

a controller communicatively coupl^ to the plurality of field devices and 
including a unit module that carries out at least a portion of the process, wherein the 
unit module causes the controller to process aVroup of composite failure codes to 
determine whether the process should be stopped. 



33 - 



# 



PATENT 
06005/35530 



The process control system of claim 33, wherein the group of 
composite Vailure codes is generated by a plurality of control modules. 

35. \The process control system of claim 34, wherein the plurality of 
control module^ are instantiated within the plurality of field devices. 

36. Th&process control system of claim 34, wherein the plurality of 
control modules areVinstantiated within the controller. 

37. The process control system of claim 34, wherein each of the control 
modules uses a list of failures to generate its respective composite failure code. 

38. The processVontrol system of claim 37, wherein the list of failures 
includes numerical values associated with one or more failures and wherein each of 
the field devices mathematically combines the numerical values within its respective 
list of failures to generate its respective failure code. 

39. The process control system of claim 38, wherein each^of the control 
modules mathematically combines\the numerical values within its respective list of 
failures by calculating a weighted sum of the numerical values. 

40. The process control system of claim 33, wherein the unit module 
causes the controller to select the groupyOf the composite failure codes based on a 
current phase of the process. 

41 . The process control system <^ claim 33, wherein each of the control 
modules automatically sends its respective composite failure code to the controller. 
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42. The process control system of claim 33, wherein the controller 
processes\he group of the composite failure codes by selecting a worst failure code 
from the grcmp of the composite failure codes and comparing the worst failure code 
to a predetermined threshold associated with a determination of whether the process 
should be stopped. 

43. The process control system of claim 42, wherein the controller 
selects a failure code having the highest numerical value from the group of the 
composite failure codes toSbe the worst failure code. 
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